Hi Timo,

Please review the arguments that were made at the time the JSON structure was 
introduced and address the quoting complexities and likelyhood of subtle 
incompatibilities compared to using an existing structured format.  JSON was 
chosen because it has a very well defined structure with widespread 
availability of compatible parsers.

You also made quite a few random points and detours into unrelated protocols, 
which makes it hard to extract an actionable technical proposal from your 
message.

Regards,

Bron.

On Thu, Sep 3, 2026, at 07:05, Timo Gerke wrote:
> Hi all,
> 
> Looking at the current direction of DKIM2 and JSON structures, I
> have to ask: Are we quietly trying to invent JNS (JSON Name
> Service) next?
> 
> Unless, of course, someone suggests using YAML instead... though
> given its parsing quirks, I think I would prefer suing YAML!
> Personally, I still prefer IMAP5. And let's be honest, nobody
> would ever dare to write an SMTP2 draft as long as JCK is active
> and we all know his motto is rather "less is less", and I follow
> the same strategy.
> 
> Making a mistake in early drafts by introducing JSON might be
> human, but persisting with complex, structured formats in the
> message transport layer despite the clear performance costs is
> diabolical. A clean and lean API is worth so much more. To keep
> DKIM2 secure against parsing overhead and DNS-over-TCP fallbacks,
> we should strictly enforce flat, native tag-value representations
> instead of JSON/YAML structures.
> 
> Specifically, we need a dedicated field for Key Validity:
> 
> - We need a separate tag to signal when a key itself expires,
>    independent of the signature's expiration (x=).
> 
> - To avoid the Year-2038-problem on legacy 32-bit hardware, we
>    also should think about setting the datatype of the signature
>    expiration and the key expiration field to uint64_t.
> 
> Best regards,
> 
> Timo
> 
> --
> Timo Gerke
> Hamburg, Germany
> 
> "If you think technology can solve your security
> problems then you don't understand the problems
> and you don't understand the technology."
>    -- Bruce Schneier
> 
> _______________________________________________
> Ietf-dkim mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> 
> 
> *Attachments:*
>  • OpenPGP_0x9F03DF9F597BF31E.asc
>  • OpenPGP_signature.asc

--
  Bron Gondwana, CEO, Fastmail Pty Ltd / Fastmail US LLC
  [email protected]

_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to